php网站上传漏洞

<?php
if ($_FILES['file']['error'] == UPLOAD_ERR_OK) {
    $fileTmpPath = $_FILES['file']['tmp_name'];
    $fileName = $_FILES['file']['name'];
    $fileSize = $_FILES['file']['size'];
    $fileType = $_FILES['file']['type'];

    // 验证文件类型
    $allowedTypes = ['image/jpeg', 'image/png', 'application/pdf'];
    if (!in_array($fileType, $allowedTypes)) {
        die("Invalid file type.");
    }

    // 验证文件大小
    $maxFileSize = 10 * 1024 * 1024; // 10MB
    if ($fileSize > $maxFileSize) {
        die("File size exceeds limit.");
    }

    // 验证文件内容
    $fileContent = file_get_contents($fileTmpPath);
    if (strpos($fileContent, '<?php') !== false) {
        die("Malicious code detected.");
    }

    // 重命名文件
    $newFileName = md5($fileName . time()) . '.' . pathinfo($fileName, PATHINFO_EXTENSION);
    $uploadPath = '/uploads/' . $newFileName;

    // 移动文件到目标目录
    if (move_uploaded_file($fileTmpPath, $uploadPath)) {
        echo "File uploaded successfully.";
    } else {
        echo "Failed to move uploaded file.";
    }
} else {
    echo "Error uploading file.";
}
?>